DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c2195d997995b88427e02ef9d14e853c6fa51cf58522b3068b18e600cf908f9a.dll
Resource
win7-20230712-en
Target
c2195d997995b88427e02ef9d14e853c6fa51cf58522b3068b18e600cf908f9a
Size
1.1MB
MD5
48d2f37e910cd7cb61ccc2333e1703f8
SHA1
d39cfc180bdfc9b726eb64a894ac9777c6eb6eb0
SHA256
c2195d997995b88427e02ef9d14e853c6fa51cf58522b3068b18e600cf908f9a
SHA512
0ff872b93bc9cd5a49aa72cf2e8fb73a77c9fe121180964c27176d930596ec44cfa331f28685017a8cc1196191ef9ea170b5277835a1c23062be3e4da8317a40
SSDEEP
24576:4FJkUeYqFyuaQ8yfEifDl7Ku0Gavkg3NydlbbTX4IBAUZLYn8:wJneYqFyuuKzB7Ku0GaXO94IBAUZLYn8
Checks for missing Authenticode signature.
resource |
---|
c2195d997995b88427e02ef9d14e853c6fa51cf58522b3068b18e600cf908f9a |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
FlushFileBuffers
LoadLibraryW
GetTempPathW
GetTickCount
GetDriveTypeW
WaitForSingleObject
GetPrivateProfileStringW
InitializeCriticalSection
TerminateProcess
GetCurrentProcess
GetVersionExW
CreateThread
GetExitCodeThread
GetCurrentProcessId
GetCurrentDirectoryW
GetCurrentThreadId
HeapFree
HeapAlloc
GetProcessHeap
SetEvent
OpenEventW
CreateEventW
WideCharToMultiByte
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingW
OpenFileMappingW
GetACP
CompareStringW
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
QueryPerformanceCounter
GetEnvironmentStringsW
SetEnvironmentVariableA
FreeEnvironmentStringsW
MoveFileExW
WritePrivateProfileStringW
DeleteFileW
GetFileAttributesW
FindClose
GetThreadLocale
SetThreadLocale
LocalFree
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetModuleHandleW
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
lstrlenW
GetTempFileNameW
GetComputerNameA
Sleep
CloseHandle
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
HeapReAlloc
HeapDestroy
HeapCreate
GetStringTypeW
ExitProcess
HeapSize
GetStdHandle
LCMapStringW
IsValidCodePage
GetOEMCP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCPInfo
FindFirstFileExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
RtlUnwind
SendMessageW
FindWindowW
CharNextW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetNamedSecurityInfoA
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
SysFreeString
RegisterTypeLi
UnRegisterTypeLi
VariantInit
VariantClear
SysAllocString
VarUI4FromStr
SysStringLen
LoadTypeLi
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ